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DETAILED ACTION 

Claims 1-4, 6-10, and 12-26 are currently presented and 
have been examined . 

It is noted for the record that a new Examiner has been 
assigned to this case. Any future correspondence regarding this 
case should be directed to the Examiner listed below. 

Response to Arguments 

Applicant's arguments filed 21 December 2006 have been 
fully considered but they are not persuasive. 

The Applicant argues that Passport and Koneru fail to teach 
or suggest determining whether a cookie exists on the user 
•machine and then performing steps in response to determining 
that the cookie does not exist. The Examiner respectfully 
submits that these arguments are moot in view of the currently 
presented claims. The currently presented claims contain 
conditional limitations wherein the claims fail to specifically 
recite the steps that occur when a cookie does exist on a user 
machine. Therefore, as required by MPEP 2111, the broadest 
reasonable interpretation of the claim wherein a cookie may 
exist on the user machine is valid and, since the claim does not 
recite any limitations for this case, any such limitations or 
steps wherein the cookie does not exist are interpreted as 
having no associated further limitations. Therefore, the 
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amendments made do not further limit the invention and, in fact, 
broaden the scope of the claim. Passport discloses determining 
that a cookie exists on a user computer (page 7, specifically 
"For security reasons, you must delete all Passport -related 
persistent and session cookies from a member's computer..."), 
therefore, such an interpretation in view of combined teachings 
of these references wherein a cookie may exist on the user 
machine is submitted to be valid. 

Therefore, in view of the prosecution history and the. 
combined teachings of these references, the claims are not in 
condition for allowance. It is recommended that the Applicant 
further define the conditional limitation in order to 
distinguish the claims from the prior art. 

Claim Rejections - 35 USC §103 
3. The following is a quotation of 35 U.S..C. 103(a) which 
forms the basis for all obviousness rejections set forth in this 
Office action: 

(a) A patent may not be obtained though the invention is not 
identically disclosed or described as set forth in section 102 of this 
title, if the differences between the subject matter sought to be 
patented and the prior art are such that the subject matter as a whole 
would have been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the 
invention was made. 
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4. Claims 1-4, 6-10, & 12-26 are rejected under 35 U.S.C. 
103 (a) as being unpatentable over Microsoft Passport ™ in view 
of US Patent 5,966,705 to Koneru. 

5. Regarding Claims 1, 9, 12-14, 16, 17 & 24-26, Microsoft 
Passport ™ discloses a system and method for providing 
information on a plurality of requestors over the Internet, 
("Microsoft Passport: Streamlining Commerce and Communication on 
the Web", October 11, 1999 article - Examiner numbered p. 18), 
comprising : 

storing information on the plurality of users in a 
database located on a cookie management system web 
server and associating the information with a 
plurality of keys, (Passports) , wherein keys, 

(Passports) , are assigned, (created) , for the user by 
an assigning functionality, (per pending Claim 17) , 

("Microsoft Passport is committed to Safeguarding 
Security and Privacy" - Examiner numbered p. 13-15); 
receiving a request at the cookie management system 
web server for information on a particular user from 
one of the requestors over the Internet, ("Microsoft 
Passport is committed to Safeguarding Security and 
Privacy" - Examiner numbered p. 13-15); 
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receiving a key corresponding to user data associated 
with the request at the cookie management system web 
server from the requestor over the Internet, the key 
associated with the request included in a cookie on a 
machine of the particular user wherein the key 
associated with the request was retrieved from the 
machine of the particular user by the requestor, (per 
pending Claim 12), ("Microsoft Passport is committed 
to Safeguarding Security and Privacy" - Examiner 
numbered p. 13-15); 

using the key(s) associated with the request to 
retrieve the information on that particular user from 
the database, (per pending Claim 13), ("Microsoft 
Passport is committed to Safeguarding Security and 
Privacy" - Examiner numbered p. 13-15); 
forwarding the information on that particular user to 
the one requestor over the Internet, ("Microsoft 
Passport is committed to Safeguarding Security and 
Privacy" - Examiner numbered p. 13-15); 
wherein receiving a request from a second user's 
machine, checking for a cookie on the second user's 
machine, sending a query for an available key when the 
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second user's machine does not contain any cookie, and 
placing the cookie with the available key on the 
second user's machine, (first-time sign-in), (per 
pending Claim 14), ("Microsoft Passport is committed 
to Safeguarding Security and Privacy" - Examiner 
numbered p. 13-15) . 

6. Though Microsoft Passport ™ teaches the use of cookies, 
("Microsoft Passport is committed to Safeguarding Security and 
Privacy" - Examiner numbered p. 7 & 15) , Microsoft specifies 
that when a user chooses to "sign-out" of Passport, all 
Passport-related cookies from all Passport Web sites are deleted 
to insure unauthorized people are not able to access member 
information from the same computer. In other words, though 
Microsoft Passport ™ teaches temporary cookie storage on the 
client, it does not specifically teach permanent cookie storage 
on- the client . 

7. Koneru discloses a "globally unique identifier", (GUID) , 
created by a server when a user first accesses a website, and 
stored on the client computer as a "cookie" . Koneru additionally 
teaches the subsequent creation and storage of a database entry, 
(per pending Claims 24-26) , on the server computer to track the 
user activity, (Col. 2, lines 43-67; Col. 3, lines 1-10; Col. 4, 
lines 59-67; Col. 5, lines 1-47; & Claimsl-25) , (Examiner notes 
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that n a first access" inherently implies that no cookie exists. 
Examiner additionally notes that Applicant's claim language does 
not enumerate any specific means by which the requestor "knows" 
that the cookie is successfully written to the user machine, and 
as such, Examiner finds that the requestor obviously knows when 
and if the cookie is successfully written to the user machine, 
as the requestor is the one writing the cookie to the user 
machine) . Upon user return to the website, the browser searches 
local storage to determine if it has a cookie for that website. 
If so, the browser transmits the cookie to the server, (Col. 2, 
lines 12-67 and Col. 3, lines 1-10). Koneru further discloses 
use of the GUID which also prompts the user for user ID and 
password information, which the system stores as a cookie which 
user ID and password information is subsequently received by a 
website each time the user passes the cookie to the website, 
(Col. 2, lines 12-67 and Col. 3, lines 1-10). 

8. Moreover, Examiner notes, that Koneru specifically teaches 
Applicant's claim limitations, including server-to-server 
communications wherein the web server database is accessed using 
the token received from the client, (Koneru - Claims 1-25; 
particularly Claims 1-11) . Additionally, Examiner notes that 
the combined references clearly and obviously teach receipt of a 
user-supplied password and key, wherein the user-supplied 
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password is obtained from the particular user by the requestor 
and grants the requestor permission to use the information the 
particular user in the cookie management system, (Koneru - Cols. 
1 & 2 ; & Col. 3, lines 1-10), ("Microsoft Passport is committed 
to Safeguarding Security and Privacy" - Examiner numbered p. 13- 
15) . 

9. It would have been obvious to one of ordinary skill in the 
art at the time of invention by Applicant to substitute the 
Koneru method of permanent storage of cookie data on the client 
within the Microsoft Passport ™ system. The motivation to 
combine is found within the Microsoft Passport ™ use of cookies 
generally and in the fact that should a member client not sign 
off or close the browser, said Passport-related cookies in 
theory are never deleted. For. reasons of security, Microsoft 
Passport ™ teaches the destruction of cookie data on the client 
machine, however, retention of the same would have been an 
obvious, albeit less secure variation. Additional motivation to 
combine is found in Koneru, which teaches a. need for secure 
storage of user information used for tracking repeat user 
website visits, (i.e.: Microsoft Passport), (Koneru - Col. 1, 
lines 47-67 & Col. 2, lines 1-47). Thus, Claims 1, 9, 12-14, 16, 
17 & 24-2 6 are found to be unpatentable over the combined 
teachings of Microsoft Passport ™ in view of Koneru. 
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10. Regarding Claims 2 & 3 , the combined teachings of Microsoft 
Passport ™ in view of Koneru are relied upon as noted herein. 

As noted above, Microsoft Passport ™ discloses the storing of 
information as a different key(s) (Passport (s) ) for each user, 
wherein the different keys may represent multiple sets of 
information pertaining to the same user, ("Microsoft Passport is 
committed to Safeguarding Security and Privacy" - Examiner 
numbered p. 13-15). Examiner notes that within Microsoft 
Passport ™, a user may create multiple Passports using multiple 
sets of information. Thus, Claims 2 & 3 are found to be 
unpatentable over the combined teachings of Microsoft Passport ™ 
in view of Koneru. 

11. Regarding Claims 4, 5, 11 & 19, the combined teachings of 
Microsoft Passport ™ in view of Koneru are relied upon as noted 
herein. Microsoft Passport ™ further discloses a security means 
wherein a requestor must be authorized by the user in order to 
obtain information about the same, (per pending Claims 4, 11 & 
19), ("Microsoft Passport is committed to Safeguarding Security 
and Privacy" - Examiner numbered p. 13-15). Examiner finds that 
the use of a user-supplied password, (per pending Claims 5 & 

11) , would have been obvious in view of the fact that Microsoft 
Passport ™ does not allow access to user information without 
user-controlled authorization, which authorization would 
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obviously include a user-supplied password verification means. 
Thus, Claims 4, 5, 11 & 19 are found to be unpatentable over the 
combined teachings of Microsoft Passport, ™ in view of Koneru. 

12. Regarding Claims 6, 10 and 20, the combined teachings of 
Microsoft Passport ™ in view of Koneru are relied upon as noted 
herein. Koneru further discloses the use of ActiveX controls, 
Java applets and VB Scripts as inserted into HTML documents, 
(Col. 1, lines 39-46). As Koneru utilizes HTML, Examiner finds 
that the use of XML for the sending/ forwarding of information by 
the cookie management system would have been obvious. Thus, 
Claims 6, 10 & 20 are found to be unpatentable over the combined 
teachings of Microsoft Passport ™ in view of Koneru. 

13. Regarding Claims 7, 15 and 18, the combined teachings of 
Microsoft Passport ™ in view of Koneru are relied upon as noted 
herein. Microsoft Passport ™ further discloses the receiving of 
new information on the user from the requestor and updating the 
database with the new information, ("Microsoft Passport is 
committed to Safeguarding Security and Privacy" - Examiner 
numbered p. 13-16) . Examiner notes that a user may update 
Passport profile information at any time. Moreover, Examiner 
finds that emails sent on behalf of participating websites could 
obviously include requests for additional or updated user 
information for a variety of purposes, which could obviously be 
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used to update or enhance user information. Thus, Examiner finds 
that it would have been obvious for a user or administrator to 
update user information per the respective user or website 
request. Thus, Claims 7, 15 and 18 are found to be unpatentable 
over the ccpmbined teachings of Microsoft Passport ™ in view of 
Koneru . 

14. Regarding Claim 8, the combined teachings of Microsoft 
Passport ™ in view of Koneru are relied upon as noted herein. 
As noted above, Microsoft Passport ™ selects, (creates) , an 
available key, (Passport), for the user and supplies the same to 
the requestor for communication with the user. Moreover, it is 
also noted above that within Microsoft Passport ™, said keys are 
only temporarily stored on the user's machine as cookies, 
whereas, the permanent storage of cookies on a user machine is 
taught by Koneru. Thus, Claim 8 is found to be unpatentable 
over the combined teachings of Microsoft Passport ™ in view of 
Koneru. 

15. . Regarding Newly Added Claims 21-23, the combined teachings 
of Microsoft Passport ™ in view of Koneru are relied upon as 
noted herein. As noted above, Microsoft Passport ™ teaches the 
use of multiple Passport configured sites, (Microsoft Passport ™ 

- p. 8), and customized cookie information, (Microsoft Passport ™ 

- p. 15), wherein it would have been obvious for a user to allow 
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different access to user information based on amount and type of 
information, (i.e.: a clothing site would not need to know user 
reading preferences) . Additionally, Koneru teaches a user- 
supplied password/key correspondence, (Koneru - Col. 2, lines 
12-67 & Col. 3, lines 1-10), user customization information, 
(Koneru - Col. 1, lines 60-67 & Col. 2, lines 1-11), and user ID. 
prompt for access to secure areas, (Koneru - Col. 2, lines 12- 
26) . Thus, in light of the combined teachings of Microsoft 
Passport ™ and Koneru, Examiner finds that it would have been 
obvious to use only the user-supplied password, (ID), to 
retrieve the information on the particular user from the 
database, wherein the user-supplied passwords correspond to an 
amount and type of the information that the particular user 
wants the requestor to have. Thus, Claims 21-23 are found to be 
unpatentable over the combined teachings of Microsoft Passport ™ 
in view of Koneru. 

Conclusion 

THIS ACTION IS MADE FINAL. Applicant is reminded of the 
extension of time policy as set forth in 37 CFR 1.136(a) . 

A shortened statutory period for reply to this final action 
is set to expire THREE MONTHS from the mailing date of this 
action. In the event a first reply is filed within TWO MONTHS 
of the mailing date of this final action and the advisory action 
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is not mailed until after the end of the THREE-MONTH shortened 
statutory period, then the shortened statutory period will 
expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1.136(a) will be calculated 
from the mailing date of the advisory action. In no event, 
however, will the statutory period for reply expire later than 
SIX MONTHS from the mailing date of this final action. 

Any inquiry concerning this communication or earlier 
communications from the examiner should be directed to George C. 
Neurauter, Jr. whose telephone number is 571-272-3918. The 
examiner can normally be reached on Monday-Friday 9am-5 :30pm. 

If attempts ' to reach the examiner by telephone are 
unsuccessful, the examiner's supervisor, David Wiley, , can be 
reached on 571-2 72-3 923. The fax phone number for the 
organization where this application or proceeding is assigned is 
571-273-8300 . 
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Information regarding the status of an application may be 
obtained from the Patent Application Information Retrieval 
(PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status 
information for unpublished applications is available through 
Private PAIR only. For more information about the PAIR system, 
see http://pair-direct.uspto.gov. Should you have questions on 
access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free) . If you would 
like assistance from a USPTO Customer Service Representative or 
access to the automated information system, call 800-786-9199 
(IN USA OR CANADA) or 571-272-1000. 
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